Wodely is a cloud-based software where all our servers and databases are hosted in the United States. Data Security sits at the core of our services. Protecting our customers’ and users’ information and their privacy is extremely important to us. As such, we take extra care in our server infrastructure to ensure that our customers’ and users’ information is secured. As part of our commitment to data privacy, we are supporting our customers’ compliance with the GDPR (General Data Protection Regulation) requirements.
Thousands of businesses trust us to keep sensitive data about their employees, customers, and business safe. Internally, we make sure that Wodely team members can’t access your information unless it’s absolutely necessary, and we’re always reviewing our access levels to make sure it stays that way. To keep your information safe from external threats, we have these measures in place:
1. Data Hosting and Storage
Wodely applications and data are hosted in a cloud infrastructure service – Microsoft Azure in USA, which is certified for their world-class security, including their physical security, data-center operations, and personnel security. Customer data or files will never be stored in any private computer. Azure’s infrastructures are backed by a team of experts, and proactive compliance trusted by enterprises and governments. It proactively safeguards your data and streamline compliance with the 100+ compliance offerings. Please click here to find more information.
2. Backup and Monitoring
Database backups are an essential part of our business continuity and disaster recovery strategy, because they help protect the data from corruption and problems with physical hardware. Wodely databases create:
- Full backups every week.
- Differential backups every 12 or 24 hours.
- Transaction log backups approximately every 10 minutes.
We also produce audit logs for all activity. All actions taken on production server are logged.
3. Failover and Disaster Recovery
Wodely was built with the failover and recovery plans in mind. The infrastructure and data are spread across 2 service instances and will continue to work should any one of those app service fails.
Wodely team monitor, detect and analyse any threats to the system. We also participate in annual testing, internal or external audits.
4. Subprocessors
Subprocessors are third‑party service providers and external vendors used by our system to process or handle customer data. We use the following Subprocessors in our platform:
- Microsoft Azure – Cloud service providing compute and storage infrastructure
- Azure DevOps – Code storage and testing
- Google Workspace – Email communication and document retetion
- Google Analytics – Tracking to handle anonymous user behavior metrics
- Twilio – SMS messages
- SendGrid – Email notificaitons
5. Database User Access
Wodely aim for the least number of people possible to have access to the production database. Customer data on the production server can only be accessed by our internal database administrator. Team members have only the bare minimum privileges they need to do their job, and only during periods while they need access.
6. Secure Software Design & Development
Any new feature or code that will be implemented into our system includes an in-depth analysis of security and privacy risks. All code is saved into a git version control repository and evaluated in a test environment before deploying it into our production environment. All code is reviewed by a second developer to ensure code quality.
7. Data Encryption
We only use secure connections, so information is always encrypted using Transport Layer Security (TLS) when transmitted from your mobile devices and computers to our systems. All data is encrypted in transit and at rest using enterprise-grade 256-bit encryption.
8. Access Control to Data
Two-factor authentication is available across all Wodely web applications and mobile apps to safeguard your customer data. Additionally, we provide a Single Sign-On (SSO) solution for our enterprise customers.
9. Confidentiality and Data Protection
Customer and confidential data are protected through secure handling practices, strict access controls, and encryption where appropriate. We are committed to maintaining the confidentiality, integrity, and availability of all customer information.
10. SOC 2-Aligned Security Program
We align our practices with the SOC 2 Trust Services Criteria, which focus on Security, Availability, Confidentiality, Processing Integrity, and Privacy. These principles guide how we design, implement, and continuously improve our security controls. We are undergoing SOC 2 annual audit to validate our security practices and controls.
11. Training and Awareness
We are committed to maintaining robust data security practices. All team members are required to stay informed and up-to-date on policies related to data security and disaster recovery planning. Access to customer data is strictly limited to team members whose job responsibilities necessitate such access, such as database administrators. This ensures that customer data is protected and handled in compliance with our security standards.
12. Third-Party Sharing
We take the integrity of customer data very seriously and will never share it with a third party unless absolutely necessary for the delivery of the service. Customer data will never be provided to third parties for advertising or marketing purposes.
13. Mask Personal Data
We have developed features that mask personal data across delivery tracking, labels, and the driver app to help you comply with data‑protection requirements. Our support team can assist you in configuring these settings correctly if you don’t want to expose any customers’ personal information through the delivery tracking system.
14. Requesting Data Deletion
If you are no longer using Wodely and would like your data erased from our databases, submit a request and we will process the removal within 5 business days.
If you have any queries or complaints about our data security, please contact us at:
[email protected]